Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a313030323a3a2f34382d3438203d3e20323633363831.roa
File:                     323830333a633234303a313030323a3a2f34382d3438203d3e20323633363831.roa (raw, json)
Hash identifier:          4HqFA2cBGSxrKmGXpxHfQlYcduhvRAlvp0MJHS6pKqI=
Subject key identifier:   FB:04:C6:C2:6F:E3:07:70:C5:09:94:B9:A4:26:FD:2C:68:33:A8:44
Certificate issuer:       /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial:       2B41FE42EDA7DC3CA9D6F1B5EC98F8506A4FA4E5
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a313030323a3a2f34382d3438203d3e20323633363831.roa
Signing time:             Tue 05 Mar 2024 18:21:27 +0000
ROA not before:           Tue 05 Mar 2024 18:16:27 +0000
ROA not after:            Tue 04 Mar 2025 18:21:27 +0000
asID:                     263681
IP address blocks:        2803:c240:1002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:41:fe:42:ed:a7:dc:3c:a9:d6:f1:b5:ec:98:f8:50:6a:4f:a4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
        Validity
            Not Before: Mar  5 18:16:27 2024 GMT
            Not After : Mar  4 18:21:27 2025 GMT
        Subject: CN=FB04C6C26FE30770C50994B9A426FD2C6833A844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:33:0d:c9:51:62:26:2a:e0:cf:db:74:87:17:
                    06:9d:4c:d5:3e:d5:7c:bf:89:19:60:e5:62:02:66:
                    fa:f0:6e:6c:91:c9:f1:74:f0:2e:98:1c:94:71:75:
                    0f:74:6f:ba:78:46:b9:95:43:e6:ed:50:3b:b3:ff:
                    1e:97:4f:5a:74:9d:fd:dd:f9:a0:f9:bc:1d:24:5e:
                    bc:62:e0:6d:dd:5c:b8:0a:ec:3b:64:b2:e5:9b:1c:
                    fa:f0:01:20:2a:43:6a:ae:77:41:ac:f3:5b:96:7e:
                    7d:33:a7:0e:a4:63:85:d3:93:42:0e:c0:f9:e2:d8:
                    06:86:1a:8d:64:72:2e:03:62:57:36:e1:53:70:35:
                    39:62:e4:e5:f5:bd:75:7b:17:36:92:8d:0f:70:7e:
                    38:cc:54:27:1f:92:a1:c2:8c:76:1a:0b:53:0f:ac:
                    63:03:d5:e2:5f:45:3e:9c:e4:d0:28:56:71:b4:fd:
                    78:15:8a:a2:ff:0e:de:6f:2b:f7:d0:d6:9f:4e:2b:
                    c5:1e:5c:3f:d3:32:22:13:1b:fb:81:72:d2:b6:0d:
                    39:f1:1d:d2:13:a8:cd:0c:47:be:5a:46:0a:2e:e5:
                    e9:0d:ff:b4:ce:43:28:c5:82:b4:46:5d:57:37:77:
                    92:65:36:73:c7:3c:20:d5:27:9d:0d:48:2f:fc:4e:
                    ce:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:04:C6:C2:6F:E3:07:70:C5:09:94:B9:A4:26:FD:2C:68:33:A8:44
            X509v3 Authority Key Identifier:
                keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a313030323a3a2f34382d3438203d3e20323633363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c240:1002::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:4f:1e:df:7a:84:27:18:dc:ff:d6:c5:cf:dc:39:f5:f3:cd:
         61:82:f5:5a:79:86:5f:e3:61:b8:1b:5d:a5:cb:29:6b:16:9b:
         c7:1c:44:5f:f3:0b:9a:c2:2f:67:d3:f0:e4:e0:f5:f4:31:21:
         5d:78:88:91:29:f4:03:86:3d:4c:32:15:53:e0:7d:46:a0:cf:
         15:7a:6c:11:5b:0c:28:52:4b:1f:a8:df:f6:6f:c5:1a:35:de:
         9a:c2:c1:55:79:ea:07:96:10:39:c5:ef:f7:44:43:1e:0d:ee:
         61:11:ea:f6:1d:86:54:e8:ad:1c:c9:58:b9:fa:80:cd:ae:07:
         54:cb:f9:4e:cc:72:93:bf:de:12:9f:e0:b1:11:22:e1:87:f9:
         b6:6f:20:2a:86:05:e7:c4:03:0f:6e:71:53:78:3a:c9:a7:5c:
         74:0e:e0:aa:d2:b7:74:c4:62:17:f1:4e:c7:14:7c:dd:11:a7:
         05:1d:94:94:b3:90:18:78:64:2a:54:bd:85:08:d1:8d:a0:5a:
         c9:77:41:72:49:b9:5f:4e:5d:d8:02:aa:93:92:16:bf:b3:32:
         78:ad:98:f5:05:50:7a:c9:e3:9d:95:dd:76:c8:57:bc:61:2e:
         33:ac:75:6d:01:c5:e1:32:cc:7f:06:0b:7a:75:17:69:63:00:
         3f:0d:ee:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 25 22:05:56 2024 by rpki-client on console-ams.rpki-client.org